Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
File: NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json)
Hash identifier: G7jqNn1PYSVG71EqeqR/1pYwgJGaiVx7FUjXbNctLUA=
Subject key identifier: 66:59:1F:F1:21:B2:DB:CE:A6:8C:FE:5A:AF:18:6D:02:DA:94:F3:07
Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
Certificate issuer: /CN=36368aac0f4a28c8a31760f06b578dae453146f0
Certificate serial: 01A17E85EFAD81A70D5A4EE61A2CD2D72F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
Manifest number: 1AC2
Signing time: Tue 27 Oct 2026 18:01:09 +0000
Manifest this update: Tue 27 Oct 2026 18:01:09 +0000
Manifest next update: Wed 28 Oct 2026 18:01:09 +0000
Files and hashes: 1: KqbQhkdZxzpCNnx1oWr4fisphrk.roa (hash: Wd6NpR+WA7JLVkZVqwEuj4FqkYVnQ8Ba2vJsRl6/8ck=)
2: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: CEcjBhLAVSoBSDzXcQhIFFZO9qyZvj54uOm8BIAz9NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:ef:ad:81:a7:0d:5a:4e:e6:1a:2c:d2:d7:2f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0
Validity
Not Before: Oct 27 18:01:09 2026 GMT
Not After : Oct 28 18:01:09 2026 GMT
Subject: CN=66591ff121b2dbcea68cfe5aaf186d02da94f307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:58:33:7a:25:e8:16:1e:b1:64:6d:2d:3b:
42:a7:75:ff:cd:30:49:5a:0d:86:d1:57:3a:d8:1e:
96:60:f8:50:61:fd:d5:d5:dc:42:3d:98:9d:7d:30:
d8:71:c1:96:52:17:e6:b7:1b:54:26:b8:79:8c:a7:
91:2c:12:d8:18:eb:ca:0b:37:27:ba:74:da:7a:72:
28:15:fa:c6:36:c2:23:09:ab:49:31:b8:1f:2b:ad:
2c:92:a5:f0:15:2d:30:90:1a:a2:33:01:e8:06:ff:
5d:b4:cb:48:62:c1:d1:cf:b8:50:a7:54:9c:ed:b1:
2b:2b:c2:94:df:49:6a:ff:98:95:49:1b:51:ad:56:
0f:56:cf:a9:b8:77:6c:3f:d2:65:94:94:dd:76:10:
a8:dc:fd:35:20:6a:69:43:d9:a2:30:dc:bf:e0:40:
8d:fc:bb:5f:39:70:df:5c:8c:ff:8f:9c:b2:53:e1:
8b:00:8d:78:1a:f5:d9:05:7d:46:14:13:60:03:7c:
1e:0c:a5:08:ff:c2:66:75:bb:ca:1a:09:55:78:3b:
66:7c:91:39:73:91:63:44:ef:6f:74:5c:15:06:81:
fe:f5:67:ff:74:f6:21:08:82:f7:9d:e0:de:12:e3:
1a:83:73:53:44:5a:0c:12:3e:56:aa:68:d4:82:33:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:59:1F:F1:21:B2:DB:CE:A6:8C:FE:5A:AF:18:6D:02:DA:94:F3:07
X509v3 Authority Key Identifier:
keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1e:27:3b:ee:d3:c3:b7:a0:57:d4:26:fa:cc:b1:ae:36:bf:
d2:98:fd:a4:9c:32:ef:bc:33:4f:07:e5:9c:00:28:9d:13:74:
0d:60:21:43:88:fb:7d:47:10:f3:ae:4b:66:83:30:a8:93:a7:
e6:04:05:ea:c5:1c:33:0a:de:07:43:a8:42:e8:ff:ea:de:56:
b5:5d:11:f5:08:74:9f:b0:73:e8:c5:fc:14:c3:87:ff:1e:b5:
8b:bd:8a:a4:a2:d0:ca:ce:e9:e9:e7:c3:06:d3:0a:d7:fa:34:
b1:22:a8:19:78:bf:29:a0:d8:8f:06:54:60:b0:ca:a3:f9:3e:
12:47:1a:ff:32:6c:c1:bb:2d:34:40:af:b8:03:6a:d0:7c:8f:
08:a6:a6:5b:d9:84:85:0e:e8:fc:15:bb:52:9a:5b:80:d5:76:
f3:de:f0:b4:f8:a1:68:52:24:c3:ca:20:d7:93:3e:b5:71:b9:
fe:b6:d9:9a:5f:a5:fb:14:fe:cb:13:49:4f:9f:01:de:d6:3a:
4c:91:9f:96:62:eb:f6:a1:fc:17:c4:6b:4e:bb:2c:43:6b:7a:
5a:5c:64:2a:13:fa:98:0d:b5:0a:ba:85:5e:d4:a2:36:5c:5a:
ed:fc:c8:e9:4d:05:76:b4:d7:d6:cd:bf:5e:bd:f3:ae:e3:20:
e8:ad:49:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:40:59 2026 by rpki-client